I have a network share where I pull the Desktop and the Start menu items for all Terminal Server sessions based on the User's group membership using a GPO. Unfortunately I did not have something configured correctly and the Users could make changes to their profile, most notably adding files to the desktop and, when they logged out, the share was updated with their changes. Obviously this was not desirable for when other Users of the same group membership logged in the got these changes. I played around with different settings in the GPO but just couldn't seem to get the right combination. My interim solution was to make the share read-only. I have disabled right-clicking almost everywhere already and they are also limited as to what drives are available. What I really need is the correct configuration that does not leave the User's Desktop and Start Menu items on the TS and at the same time does not try and return it to the shared folder. Any help would be appreciated. Thank you, Azee
If all you want is to have a common/shared desktop/start menu folders off the terminal server and prevent users from making changes to those folders, your solution is already the easiest method to accomplish this. There is no setting directly in the folder redirection policy settings. The only things to make sure you set in the policy is to uncheck the "user has exclusive access" and "move contents to folder" settings.
On a side note, it's generally bad form to piss off people trying to help you.